Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/scbm5ZMzW5jKerSQZ-Imjx_XYCs.roa
File:                     scbm5ZMzW5jKerSQZ-Imjx_XYCs.roa (raw, json)
Hash identifier:          fhsR9+7rHgg90Hr8vt+BPbjxrxmEbcudmM9EOuT8BPI=
Subject key identifier:   B1:C6:E6:E5:93:33:5B:98:CA:7A:B4:90:67:E2:26:8F:1F:D7:60:2B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01CC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/scbm5ZMzW5jKerSQZ-Imjx_XYCs.roa
Signing time:             Fri 07 Jul 2023 04:16:39 +0000
ROA not before:           Fri 07 Jul 2023 04:16:39 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.112.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:39 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B1C6E6E593335B98CA7AB49067E2268F1FD7602B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8e:b0:b5:87:48:25:d3:03:2c:94:81:c4:e4:
                    de:e7:7c:1a:f9:5c:21:74:0f:4a:bb:52:67:f6:c8:
                    e6:ca:36:b6:c8:f2:5d:19:b6:bf:cb:55:2e:10:34:
                    be:84:8f:ac:d2:b9:75:ef:7e:a0:04:04:3c:14:fc:
                    ee:dc:2a:59:36:ec:45:9e:6f:89:4d:c5:86:4c:e7:
                    6e:ae:8e:90:79:80:61:5d:5e:3f:89:e8:ea:40:68:
                    20:4e:55:da:39:db:6f:de:e7:30:00:b4:bf:ff:bb:
                    34:7c:f6:ff:8e:03:31:20:9a:b8:a9:a5:d4:fc:ac:
                    e0:01:4f:ba:c9:38:0b:94:a0:e2:0d:95:7b:b4:bb:
                    e4:46:34:9e:f1:ca:5a:cc:24:38:62:7e:d5:2a:70:
                    3f:fc:43:f9:1b:cf:ff:b0:00:e6:f4:f3:30:d9:97:
                    30:80:c7:a9:40:2a:80:5e:15:95:1e:c7:30:70:9d:
                    8a:6d:44:f6:b2:80:96:93:c9:de:f3:6b:94:19:4f:
                    51:1f:37:6f:45:d2:4c:80:2e:b1:57:62:0a:ca:38:
                    df:f3:90:32:a1:a9:08:92:c7:08:50:40:ac:24:28:
                    fb:cb:72:f6:03:6e:68:6e:c2:1f:b8:6c:31:91:d8:
                    9d:6b:4f:a5:b2:7d:34:44:a2:4c:fb:e9:e1:a7:ec:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C6:E6:E5:93:33:5B:98:CA:7A:B4:90:67:E2:26:8F:1F:D7:60:2B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/scbm5ZMzW5jKerSQZ-Imjx_XYCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:56:be:38:06:bc:31:50:de:97:d7:b7:c5:47:18:82:19:b7:
         78:ab:e4:1a:34:9e:d2:e6:6b:e8:ba:5f:be:d8:8b:53:39:f4:
         36:2c:05:6f:bc:29:da:f2:6a:3d:2a:39:b6:21:dd:44:28:21:
         49:ae:d8:73:b2:c4:fe:38:98:09:26:77:6d:ef:18:29:11:c6:
         48:3d:22:dc:5b:a9:d2:80:35:49:d7:66:b3:c9:8a:63:91:2d:
         f0:11:34:94:f7:4d:02:31:ef:be:e2:41:c4:bc:b3:50:08:68:
         a9:9e:f5:43:c9:f9:a2:3b:6a:6a:02:33:04:06:c2:22:08:a3:
         c3:f2:7f:68:5a:1c:d4:07:e0:d1:93:f7:9e:a1:9b:d5:61:13:
         64:f6:67:80:bb:31:06:57:54:6f:65:bf:b3:d4:52:c9:5b:b3:
         47:5a:65:63:97:b0:d7:04:23:9e:b9:f1:0c:dc:3f:62:b7:c5:
         75:6a:11:ad:c4:7d:e9:26:04:8b:91:e5:f2:a5:1b:43:b2:8b:
         a4:91:d1:13:82:46:48:53:fb:71:b7:8f:63:15:52:d8:0f:d1:
         8e:12:6b:49:a8:96:eb:fc:fd:c2:fe:12:da:9e:c6:de:11:84:
         08:03:87:40:97:04:29:df:8a:fc:1b:25:bf:93:8f:3f:90:4d:
         0e:1c:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org